From fadc60e940ae7545192194094e6d71778f309159 Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Mon, 16 Mar 2009 20:55:54 +0000
Subject: [PATCH] Fix Escape HTML string

---
 html/priv_user.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/html/priv_user.php b/html/priv_user.php
index 95d3f64a9..20c06811f 100644
--- a/html/priv_user.php
+++ b/html/priv_user.php
@@ -206,7 +206,7 @@ $mod_user=new User(DbConnect(),$uid);
 foreach ( $Dossier as $rDossier) {
 
   $priv=$mod_user->get_privilege($rDossier['dos_id']);
-  printf("<TR><TD> Dossier : %s </TD>",$rDossier['dos_name']);
+  printf("<TR><TD> Dossier : %s </TD>",h($rDossier['dos_name']));
   
   $select=new widget('select');
   $select->table=1;